[squid-users] how to use parent cache_peer with url_rewriter working on it

2012-04-20 Thread x-man
Hello there, I am planning for squid implementation which consists of one main squid that will server all the web except the video sites and second squidbox that will only deal with the video content. As I know I have to use the cache_peer directive to tell the main squid that it has to ask the

[squid-users] DNS & Squid tree with parent - child

2012-04-20 Thread anita
Hi All, I am using squid 3.1.16 version. I am looking into extending the DNS feature to suit my application. I have a query here regarding the basic DNS feature in Squid. I am using internal dns client & localdomain as my dns server. My Setup: 1 Child squid (sitting in machine 1) -> 1 Parent Squ

[squid-users] Re: Correctoions (was TCP_SWAPFAIL/200)

2012-04-20 Thread Amos Jeffries
On 20/04/2012 8:30 a.m., Linda Walsh wrote: Amos Jeffries wrote: On 18.04.2012 12:46, Linda Walsh wrote: http_access allow CONNECT Safe_Ports NOTE: Dangerous. Safe_Ports includes port 1024-65535 and other ports unsafe to permit CONNECT to. This could trivially be used as a multi-stage sp

Re: [squid-users] current status of bump-server-first + dynamic certs in 3.3??

2012-04-20 Thread Amos Jeffries
On 19/04/2012 9:54 p.m., Ahmed Talha Khan wrote: Hey all, I want to use dynamic certificates (and/or mimic original ssl server certs) while running in a transparent mode. I know this is not possible in 3.2 because of the bump-client-first approach. Release roadmap for squid 3 says that bump-serv

Re: [squid-users] Problem downloading large files

2012-04-20 Thread Amos Jeffries
On 19/04/2012 9:22 p.m., Leonardo wrote: Hi all, We noticed that users behind our Squid cannot download files larger than 2 Gb: the connection is cut around that limit. reply_body_max_size is not set in squid.conf so download file size should be unlimited. I've done a tcpdump capture and exami

Re: [squid-users] ESI support in SQUID

2012-04-20 Thread Amos Jeffries
On 19/04/2012 9:06 p.m., Dirk Högemann wrote: Hi, I am trying to run SQUID with ESI support (parser is custom). Squid version? This works fine until processed pages reference for example Javascript files with filesize bigger than 64K. In that case SQUID crashes. LOG: 2012/04/19 10:47:19.29

[squid-users] Squid load balancing n cluster

2012-04-20 Thread Ibrahim Lubis
I need some info about load balancing n cluster in squid , is there use some cluster software or just use icap ?

[squid-users] Re: Re: Re: Re: squid_kerb_auth High CPU load.

2012-04-20 Thread Markus Moeller
Hi Simon, The config is standard and looks OK. Can you run strace (strace -f -F -o /tmp/squid_kerb_auth.strace -p ) for 1-2 min against the process when it is busy and send me the output ? Markus "Simon Dwyer" wrote in message news:1334876889.2408.45.ca...@sdwyer.federalit.net... Not su

[squid-users] Re: Re: Re: Re: squid_kerb_auth High CPU load.

2012-04-20 Thread Markus Moeller
Can you also send me the extract from cache.log for the same period ? Do you use the -d debug flag with squid_kerb_auth ? Markus "Markus Moeller" wrote in message news:jmrkhi$42v$1...@dough.gmane.org... Hi Simon, The config is standard and looks OK. Can you run strace (strace -f -F -o /tm

Re: [squid-users] DNS & Squid tree with parent - child

2012-04-20 Thread Amos Jeffries
On 20/04/2012 9:59 p.m., anita wrote: Hi All, I am using squid 3.1.16 version. I am looking into extending the DNS feature to suit my application. Please explain? what type of app do you have that requires anything outside of regular HTTP handling? HTTP URLs contain a hostname or IP. DNS is

Re: [squid-users] Squid load balancing n cluster

2012-04-20 Thread Amos Jeffries
On 21/04/2012 12:16 a.m., Ibrahim Lubis wrote: I need some info about load balancing n cluster in squid , is there use some cluster software or just use icap ? HTTP multiplexing / load balancing is built into Squid. http://wiki.squid-cache.org/Features/LoadBalance You can also use any TCP/I

[squid-users] Re: DNS & Squid tree with parent - child

2012-04-20 Thread anita
Hi Amos, I intend to use Squid for a satellite based communication network. A child squid on one end will talk to the parent squid on the other end. My understanding was that for every http request that does not have IP but names instead, the child squid will do a dns lookup if it is a miss in it

[squid-users] heap LFUDA and squid 3.2.0.16

2012-04-20 Thread Kiril Dimitrov
I have the following issue squid version: "kid1| Starting Squid Cache version 3.2.0.16-20120405-r11545 for amd64-unknown-freebsd9.0..." compiled with: "./configure --prefix=/usr/local/squid/ --with-swapdir=/usr/local/squid/cache/ --with-pidfile=/usr/local/squid/ --with-logdir=/usr/local/squid/logs

Re: [squid-users] how to use parent cache_peer with url_rewriter working on it

2012-04-20 Thread Amos Jeffries
On 20/04/2012 7:01 p.m., x-man wrote: Hello there, I am planning for squid implementation which consists of one main squid that will server all the web except the video sites and second squidbox that will only deal with the video content. As I know I have to use the cache_peer directive to tel

Re: [squid-users] NTLM not working with HTTPS pages

2012-04-20 Thread Harry Mills
Hi Wladner, I don't think this is causing your problems, but I think you need to change the following: Instead of: http_access deny CONNECT !Safe_ports try: http_access deny !Safe_ports http_access deny CONNECT !SSL_ports Also, on the last two lines of your included config you have: acl A

Re: [squid-users] Re: DNS & Squid tree with parent - child

2012-04-20 Thread Amos Jeffries
On 21/04/2012 12:47 a.m., anita wrote: Hi Amos, I intend to use Squid for a satellite based communication network. A child squid on one end will talk to the parent squid on the other end. My understanding was that for every http request that does not have IP but names instead, the child squid w

Re: [squid-users] heap LFUDA and squid 3.2.0.16

2012-04-20 Thread Amos Jeffries
On 21/04/2012 12:58 a.m., Kiril Dimitrov wrote: I have the following issue squid version: "kid1| Starting Squid Cache version 3.2.0.16-20120405-r11545 for amd64-unknown-freebsd9.0..." compiled with: "./configure --prefix=/usr/local/squid/ --with-swapdir=/usr/local/squid/cache/ --with-pidfile=/us

Re: [squid-users] NTLM not working with HTTPS pages

2012-04-20 Thread Amos Jeffries
On 21/04/2012 1:15 a.m., Harry Mills wrote: Hi Wladner, I don't think this is causing your problems, but I think you need to change the following: Instead of: http_access deny CONNECT !Safe_ports try: http_access deny !Safe_ports http_access deny CONNECT !SSL_ports Also, on the last two l

Re: [squid-users] heap LFUDA and squid 3.2.0.16

2012-04-20 Thread Kiril Dimitrov
thanks a lot, I was afraid something like that would be the issue, alas what puzzled me is that when u change the .conf after squid is already running and do a -k reconfigure you don't get an error. Perhaps the removal policy is only checked on initial start-up I will report again after i recompil

Re: [squid-users] NTLM, non-domain machines and keep-alive

2012-04-20 Thread Amos Jeffries
On 20/04/2012 12:03 a.m., Harry Mills wrote: Hi, I have upgraded our squid to version 3.1.19 but I am still seeing the repeated popup box issue with non-domain member machines (windows machines). Well, yes. Lookup the requriements for NTLM with actual security enabled. #1 on the list is "

Re: [squid-users] Encrypted (Basic) Authentication

2012-04-20 Thread Amos Jeffries
On 19/04/2012 8:38 p.m., Christoph Mitasch wrote: Hello, we have stored usernames and secure password hashes in a central OpenLDAP directory. We want to use Squid as a proxy for clients and require them to login using the central LDAP directory. This login should work over an encrypted connecti

Re: [squid-users] heap LFUDA and squid 3.2.0.16

2012-04-20 Thread Amos Jeffries
On 21/04/2012 1:32 a.m., Kiril Dimitrov wrote: thanks a lot, I was afraid something like that would be the issue, alas what puzzled me is that when u change the .conf after squid is already running and do a -k reconfigure you don't get an error. Perhaps the removal policy is only checked on initi

Re: [squid-users] squid_ldap_auth to AD user credentials?

2012-04-20 Thread Amos Jeffries
On 19/04/2012 6:59 p.m., Beto Moreno wrote: Hi people. I had been reading info about squid_ldap_auth vs windows 2003 AD server, I have some questions that would like to know if someone can clear my brain. squid 2.7.x. http://www.squid-cache.org/Versions/v2/2.HEAD/manuals/squid_ldap_auth

[squid-users] Squid 3.1: access.log did not log authenticated members

2012-04-20 Thread David Touzeau
Dear I have tested all log formats on my squid 3.1.19 and member information still "IP - - " eg: 192.168.1.212 - - [ Is it normal ? I notice that using squid 3.2 log correctly members uid in access.log Best regards

Re: [squid-users] NTLM not working with HTTPS pages

2012-04-20 Thread Wladner Klimach
Amos, what could be causing this? When I desable NTLM authentication or when I use Kerberos all access go just fine, but when only NTLM is able I can't get access to https pages and I get in the logs TCP_DENIED/407. How can I debug it? regards 2012/4/20 Amos Jeffries : > On 21/04/2012 1:15 a.m.,

[squid-users] ICAP service adaptation with service sets

2012-04-20 Thread Francis Fauteux
We are using Squid as an adaptation proxy, with a farm of ICAP RESPMOD servers running on a single host. Our (partial) configuration is thus: icap_enable on icap_service respmod_service1 respmod_precache 0 icap://:/RESPMOD icap_service respmod_service2 respmod_precache 0 icap://:/RESPMO

Re: [squid-users] NTLM, non-domain machines and keep-alive

2012-04-20 Thread Harry Mills
Hi, Firstly, thank you Amos for helping out here. I am finding it rather frustrating because I have enough knowledge on this subject get myself into trouble, but not enough to get myself back out of it! On 20/04/2012 14:58, Amos Jeffries wrote: On 20/04/2012 12:03 a.m., Harry Mills wrote: H

Re: [squid-users] ICAP service adaptation with service sets

2012-04-20 Thread Amos Jeffries
On 21/04/2012 5:53 a.m., Francis Fauteux wrote: We are using Squid as an adaptation proxy, with a farm of ICAP RESPMOD servers running on a single host. Our (partial) configuration is thus: icap_enable on icap_service respmod_service1 respmod_precache 0 icap://:/RESPMOD icap_servi

Re: [squid-users] NTLM not working with HTTPS pages

2012-04-20 Thread Amos Jeffries
On 21/04/2012 4:01 a.m., Wladner Klimach wrote: Amos, what could be causing this? When I desable NTLM authentication or when I use Kerberos all access go just fine, but when only NTLM is able I can't get access to https pages and I get in the logs TCP_DENIED/407. How can I debug it? You need t

Re: [squid-users] Problem downloading large files

2012-04-20 Thread Iojan Sebastian
On 4/19/2012 6:22 AM, Leonardo wrote: Bypassing the Linux bridge where the Squid runs solves the problem, so apparently the problem lies at the Squid or OS level. What OS are you? I have seen 2 Gigs limits in Linux i386. Not sure where this applies. Regards Sebastian